Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
File: API1ekH05ZC6Yudx0gVOAI4O2R4.mft (raw, json)
Hash identifier: lez+g4v16xlUw8FyTheI+OHjeMDsi1HjdV0pV2+OXMk=
Subject key identifier: 0D:19:A9:DE:1C:A4:03:D9:7C:A3:25:49:7B:F7:21:AE:D3:A8:4D:5A
Authority key identifier: 00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
Certificate issuer: /CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Certificate serial: 019F189E6370147186205752F5CAE4BDABB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
Manifest number: 0AA3
Signing time: Tue 30 Jun 2026 13:01:00 +0000
Manifest this update: Tue 30 Jun 2026 13:01:00 +0000
Manifest next update: Wed 01 Jul 2026 13:01:00 +0000
Files and hashes: 1: API1ekH05ZC6Yudx0gVOAI4O2R4.crl (hash: UjkuNvMaQxizm62PO+enlx/i/p8gJsz7Gbcc3g9azFQ=)
2: Oqp0LnSyxA2FjpucrV--rkFrY9M.roa (hash: dShE79kR6w3t9UN+uBV7ehXeiyGLd3Stfbk1UBF24b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:63:70:14:71:86:20:57:52:f5:ca:e4:bd:ab:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Validity
Not Before: Jun 30 13:01:00 2026 GMT
Not After : Jul 1 13:01:00 2026 GMT
Subject: CN=0d19a9de1ca403d97ca325497bf721aed3a84d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a5:3e:60:88:f4:38:c6:99:27:03:e5:5a:be:
bf:e9:00:63:24:c1:01:24:5d:8c:c7:2e:47:7c:33:
6f:ad:0e:61:ad:c7:3d:93:8e:e3:a9:af:9d:4e:7a:
31:5e:02:26:ce:b0:45:8a:a5:af:6b:e8:c2:ee:47:
b2:3e:58:3a:c3:d8:46:5a:4d:6d:cc:e3:f7:fb:06:
f1:7f:16:8d:b5:da:ef:8e:e1:a1:25:94:b6:71:6e:
24:8f:4a:45:82:fa:de:34:7e:57:da:c1:b1:3d:75:
32:a8:dc:78:e8:cf:bd:16:3b:56:1f:30:98:32:c3:
95:61:1d:c8:cf:89:83:37:d5:ad:e1:d6:cf:84:26:
c6:df:03:30:d9:3e:33:d0:e9:c8:dd:31:97:54:fe:
5a:11:97:05:63:fd:5e:9a:61:d0:0a:3b:a1:25:76:
32:68:ba:ca:21:20:6a:c6:e9:80:3d:ef:f9:a1:95:
d9:84:55:b4:90:57:31:0b:2c:fa:c5:bd:d5:8c:a7:
32:e8:4d:35:d7:ab:30:63:3a:e0:20:20:5d:71:f2:
0d:41:14:01:7a:4c:ff:05:5b:bb:cb:f9:73:07:b9:
14:fb:b0:28:1f:22:ab:6f:5e:1b:e1:26:10:aa:86:
98:a6:e4:55:7d:53:95:e2:a0:29:c9:a4:e3:0d:49:
8f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:19:A9:DE:1C:A4:03:D9:7C:A3:25:49:7B:F7:21:AE:D3:A8:4D:5A
X509v3 Authority Key Identifier:
keyid:00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:66:e3:1f:87:30:f1:73:49:d9:97:e7:6d:ed:da:9f:50:59:
1b:b6:b1:b4:61:55:ab:7f:cf:cd:c7:82:fc:a1:13:84:74:0d:
ae:11:9f:89:fc:56:4d:5e:58:f6:dd:74:fe:f0:af:bb:72:5b:
da:53:80:61:88:61:86:e5:39:d6:bf:35:52:78:7e:22:d6:7e:
bc:74:af:aa:fd:e4:f4:de:2a:2f:a3:0b:bd:89:2c:73:8d:d4:
b6:f2:0a:0e:26:08:2a:b1:d8:b2:c7:91:12:e2:c3:10:2c:c2:
60:cd:3e:bd:00:b8:43:49:61:09:51:c6:b9:34:b4:70:4f:e6:
68:4d:20:ea:78:ad:40:85:e7:fd:78:7c:0c:15:68:6b:65:fb:
6a:70:64:76:c3:7e:86:02:67:ac:89:f3:64:78:0d:f7:e5:fe:
e8:52:d2:bb:14:9e:f3:45:58:ff:24:13:95:d4:64:9a:c0:c9:
50:7d:16:2e:83:8a:74:84:82:d0:89:6b:4b:a6:c1:d6:22:bd:
8f:7d:ee:11:2b:24:2f:d8:1f:1d:5f:47:04:28:c4:9d:f2:50:
b7:1b:40:3c:15:cd:79:c3:e1:c3:b6:c6:66:20:71:5b:cc:c3:
64:d0:4a:1c:98:03:a5:bc:d3:dc:f1:b5:ab:ef:87:1c:06:67:
38:6e:55:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YnmNwFHGGIFdS9crkvau2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwZjIzNTdhNDFmNGU1OTBiYTYyZTc3MWQyMDU0ZTAwOGUw
ZWQ5MWUwHhcNMjYwNjMwMTMwMTAwWhcNMjYwNzAxMTMwMTAwWjAzMTEwLwYDVQQD
EygwZDE5YTlkZTFjYTQwM2Q5N2NhMzI1NDk3YmY3MjFhZWQzYTg0ZDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKU+YIj0OMaZJwPlWr6/6QBjJMEB
JF2Mxy5HfDNvrQ5hrcc9k47jqa+dTnoxXgImzrBFiqWva+jC7keyPlg6w9hGWk1t
zOP3+wbxfxaNtdrvjuGhJZS2cW4kj0pFgvreNH5X2sGxPXUyqNx46M+9FjtWHzCY
MsOVYR3Iz4mDN9Wt4dbPhCbG3wMw2T4z0OnI3TGXVP5aEZcFY/1emmHQCjuhJXYy
aLrKISBqxumAPe/5oZXZhFW0kFcxCyz6xb3VjKcy6E0116swYzrgICBdcfINQRQB
ekz/BVu7y/lzB7kU+7AoHyKrb14b4SYQqoaYpuRVfVOV4qApyaTjDUmPsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0Zqd4cpAPZfKMlSXv3Ia7TqE1aMB8GA1UdIwQY
MBaAFADyNXpB9OWQumLncdIFTgCODtkeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVBJMWVrSDA1WkM2WXVkeDBnVk9BSTRPMlI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81ZDgwMGEtOTFkMC00YmUxLTkyMjIt
NWUwZmE5NGJjMzcwLzEvQVBJMWVrSDA1WkM2WXVkeDBnVk9BSTRPMlI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC81ZDgwMGEtOTFkMC00YmUxLTkyMjItNWUwZmE5NGJjMzcw
LzEvQVBJMWVrSDA1WkM2WXVkeDBnVk9BSTRPMlI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIWbjH4cw
8XNJ2Zfnbe3an1BZG7axtGFVq3/PzceC/KEThHQNrhGfifxWTV5Y9t10/vCvu3Jb
2lOAYYhhhuU51r81Unh+ItZ+vHSvqv3k9N4qL6MLvYksc43UtvIKDiYIKrHYsseR
EuLDECzCYM0+vQC4Q0lhCVHGuTS0cE/maE0g6nitQIXn/Xh8DBVoa2X7anBkdsN+
hgJnrInzZHgN9+X+6FLSuxSe80VY/yQTldRkmsDJUH0WLoOKdISC0IlrS6bB1iK9
j33uESskL9gfHV9HBCjEnfJQtxtAPBXNecPhw7bGZiBxW8zDZNBKHJgDpbzT3PG1
q++HHAZnOG5V6A==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:06:33 2026 by rpki-client